user www-data;
worker_processes 8;
pid /run/nginx.pid;

worker_rlimit_nofile 5000;
events {
	worker_connections 4000;
}

http {

##
# Basic Settings
##

	#sendfile on;
	tcp_nopush on;
#	tcp_nodelay on;
	keepalive_timeout 65;
	types_hash_max_size 2048;

	server_tokens off;

# server_names_hash_bucket_size 64;
# server_name_in_redirect off;

	include /etc/nginx/mime.types;
	default_type application/octet-stream;
	charset utf-8;
# Update charset_types due to updated mime.types
	charset_types text/xml text/plain text/vnd.wap.wml application/x-javascript application/rss+xml text/css application/javascript application/json;

# Format to use in log files
	log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
		'$status $body_bytes_sent "$http_referer" '
		'"$http_user_agent" "$http_x_forwarded_for"';

##
# SSL Settings
##

	ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
		ssl_prefer_server_ciphers on;

##
# Logging Settings
##

	access_log /var/log/nginx/access.log;
	error_log /var/log/nginx/error.log;
	
	client_body_buffer_size 400K;
	client_header_buffer_size 1k;
	client_max_body_size 8m;
#	large_client_header_buffers 2 1k;

##
# Gzip Settings
##

	gzip on;
	gzip_disable "msie6";

	gzip_vary on;
	gzip_proxied any;
	gzip_comp_level 6;
	gzip_min_length 256;
	gzip_types
		application/atom+xml
		application/javascript
		application/json
		application/ld+json
		application/manifest+json
		application/rdf+xml
		application/rss+xml
		application/schema+json
		application/vnd.geo+json
		application/vnd.ms-fontobject
		application/x-font-ttf
		application/x-javascript
		application/x-web-app-manifest+json
		application/xhtml+xml
		application/xml
		font/eot
		font/opentype
		image/bmp
		image/svg+xml
		image/vnd.microsoft.icon
		image/x-icon
		text/cache-manifest
		text/css
		text/javascript
		text/plain
		text/vcard
		text/vnd.rim.location.xloc
		text/vtt
		text/x-component
		text/x-cross-domain-policy
		text/xml;
##
# Virtual Host Configs
##

	include /etc/nginx/conf.d/*.conf;
				   include /etc/nginx/sites-enabled/*;
				   }